The Agent Skills Directory

[COMMAND_EXECUTION]: Utility scripts such as thumbnail.py, pack.py, and redlining.py execute system binaries including soffice, pdftoppm, and git via subprocess.run.
Parameterized calls are used to avoid shell injection vulnerabilities.
Executions are limited to slide rendering, document conversion, and content comparison.
[EXTERNAL_DOWNLOADS]: Node.js dependencies for slide rendering and image processing (playwright, pptxgenjs, sharp) are specified in the standard package.json file for retrieval from the npm registry.
[SAFE]: The skill incorporates multiple defensive coding measures.
The use of defusedxml across packing and unpacking utilities protects against XXE attacks during Office document manipulation.
Custom JSON validation logic prevents duplicate key collisions during content replacement.
File path resolution is handled securely using the pathlib and Path libraries.

pptx